Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[koko009]

i need help to convert firmware to global

I want dump for firmware global Because I am very tired of trying to Debrand this device
I want to say something new that I have reached
First, I modified the names of the versions in the firmware
Second, I modified the bootloader of my device and I know that the model ID is 04050503
I detected the model ID in the version that I want to update to and found that it has a different model ID, which is 04056000
I replaced it in my bootloader and flashed it as well
Then I followed the same steps in the topic, but I was surprised that it tells me
The model ID is correct
The firmware ID is correct
But it tells me that the firmware is not TE

# File Upload
Not a json format file
recv_str=/var/fw/V550ABXM0b5.bin
Image path /var/fw/V550ABXM0b5.bin
Image length 23046030
Is being FW upgrade and checking FW ID !!!
Correct FW ID !!!
Correct model ID!!!
Invalid TE FW
Firmware Upgrade fail
File Upload


I continue with you the problem here because I have the same device, the same firmware, and the same version from the same service provider?
I would like to explain to you some steps that I have taken or have already taken
1- i have ch341a mini programmer
2- my bootloader He already has the same hex 04 05 05 03 but not updated any firmware
3- my firmware no have SSH or Telnet or FTP root
4- i control router via serial with supervisor password and copy files to usb drive
this is some screenshots

Found programmer device: WinChipHead (WCH) - CH341A
Device revision is 3.0.4
spi_nand_probe: mfr_id = 0xef, dev_id = 0xaa, dev_id_2 = 0x21
Get Status Register 1: 0x81
Get Status Register 2: 0x18
Using Flash ECC.
Detected SPI NAND Flash: WINBOND W25N01G, Flash Size: 128MB, OOB Size: 64B
READ:
Read addr = 0x0000000000000000, len = 0x0000000008000000
Read 100% [134217728] of [134217728] bytes
Elapsed time: 1287 seconds
Status: OK

this info stock befour modify version name
zycli sys atsh
Firmware Version : V550ABTL0b2r
Bootbase Version : V1.41 | 09/18/2020 11:26:25
Vendor Name : Zyxel Communications Corp.
Product Model : VMG3625-T50B
Serial Number : S213H04013608
First MAC Address : EC3EB323D480
Last MAC Address : EC3EB323D48F
MAC Address Quantity : 16
Default Country Code : FF
Boot Module Debug Flag : 00
Kernel Checksum : E993EF2A
RootFS Checksum : 1DB70D37
Romfile Checksum : 0000C902
Main Feature Bits : 00
Other Feature Bits :
7fdc5575: 04050503 00000100 00000000 00000000
7fdc5585: 00000000 00000000 00000000 0000

full info for this issue
https://github.com/eimparas/Zyxel-VMG8623-T50B-Debrand/issues/3

[koko009]

the solution

####################################################################
Before I begin, I would like to thank this person for helping me solve this problem.
get password for root or supervisor
https://www.onlinegdb.com/XR_spa_we
open router
connect uart usb ttl
open putty software for windows and connect via serial port and change 9600 to 115200
login via user root or supervisor
tybe
dd if=/dev/mtd0 of=/home/root/bootloader
hexdump -C bootloader | grep -B 1 -A 1 "ffd0"
printf '\x04\x05\x05\x03' | dd of=bootloader bs=1 seek=$((0xffc1)) conv=notrunc
printf '\x01' | dd of=bootloader bs=1 seek=$((0xffbf)) conv=notrunc
wc -c bootloader
mtd unlock mtd0
mtd writeflash bootloader 262144 0 bootloader
zycli sys atcd
reboot
not bootup to system via press any key to go to zloader
tybe
ATBT 1
ATDC 1
ATCD
ATCM
ATUR RAS.bin,y                      download offical firmware and change name to RAS.bin
change ip pc to static 192.168.1.2
open tftp64 and choose server interface to ip pc
then open tftp clinet
tybe host 192.168.1.1
choose local file from pc (RAS.bin)
prees put
after flashing firmware router is restart
open putty and login to root or supervisor
tybe
zycli sys atcd
zycli sys atcr
reboot
congratlation now your router is officall
admin password has changed
wifi name and password has changed
login 192.168.1.1 via web and supervisor
then change user admin and wifi password

##################################################################

[kitz]

Well done for finding a solution


The post formatting looks ok :

[goga3000]

Thank you for your solution
After many and many times I flashed the router successfully with your solution, and for the first time I logged successfully to the router by

192.168.1.1
user: admin
password: password as shown on the back of my router

I do a factory reset, and the surprise after the restart is that the password no longer works

The shown message is The username or password is not correct or locked.

Please help and thank you for effort

[kitz]

Hi

Thanks for your PM, but I do not have this particular modem to be able to assist.  The user koko009 debranded his WMG3625-T50B using the steps outlined above.

In his post he says that he followed the instructions

get password for root or supervisor
https://www.onlinegdb.com/XR_spa_we

If you are having difficulty please post what steps you have taken so far and perhaps someone may be able to assist you further.